I'd assume that this is a closely guarded secret. A company wouldn't want to encourage targeted ransomware attacks by admitting that (1) their security is bad enough that they were hit by ransomware in the past and (2) they're willing to pay ransom.
Why do you want to know?